chore: bump Next.js

.github/workflows/ci.yml

@@ -9,10 +9,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
         with:
           bun-version: latest
 
@@ -31,7 +31,7 @@ jobs:
       - name: Token list check
         run: ./scripts/generate-token-list-schema.sh
 
-      - uses: supabase/setup-cli@v1
+      - uses: supabase/setup-cli@b60b5899c73b63a2d2d651b1e90db8d4c9392f51
         with:
           version: latest
 

.github/workflows/e2e-worker.yml

@@ -54,13 +54,13 @@ jobs:
       CHROME_ARGS: "--no-sandbox --disable-dev-shm-usage"
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
         with:
           node-version: lts/Jod
 
       - name: Setup Bun
-        uses: oven-sh/setup-bun@v2
+        uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6
         with:
           bun-version: latest
 
@@ -79,7 +79,7 @@ jobs:
           DISPLAY: :0.0
 
       - name: Cache Bun dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830
         with:
           path: ~/.bun/install/cache
           key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lock') }}
@@ -159,7 +159,7 @@ jobs:
         env:
           NEXT_PUBLIC_BASE_URL: ${{ env.VERCEL_DEPLOYMENT_URL || inputs.base_url }}
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02
         if: always()
         with:
           name: playwright-report-${{ inputs.tag || '@near-intents' }}

.github/workflows/production.yml

@@ -16,9 +16,9 @@ jobs:
       SUPABASE_PROJECT_ID: ${{ secrets.SUPABASE_PROJECT_ID }}
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
 
-      - uses: supabase/setup-cli@v1
+      - uses: supabase/setup-cli@b60b5899c73b63a2d2d651b1e90db8d4c9392f51
         with:
           version: latest
 

.github/workflows/security.yml

@@ -10,5 +10,5 @@ on:
 jobs:
   security_analysis:
     name: Shared
-    uses: aurora-is-near/.github/.github/workflows/security_analysis.yml@master
+    uses: aurora-is-near/.github/.github/workflows/security_analysis.yml@d8ed49075f1cef41d7326cf07982872c362a2bc6
     secrets: inherit

package.json

@@ -25,7 +25,7 @@
     "@defuse-protocol/one-click-sdk-typescript": "file:./artifacts/defuse-protocol-one-click-sdk-typescript-0.1.16-patch.tgz",
     "@hot-labs/near-connect": "0.11.1",
     "@near-wallet-selector/core": "^9.1.0",
-    "@next/third-parties": "16.0.7",
+    "@next/third-parties": "16.2.6",
     "@noble/curves": "1.4.0",
     "@noble/hashes": "^1.7.1",
     "@peculiar/asn1-ecc": "^2.3.15",
@@ -69,7 +69,7 @@
     "framer-motion": "^11.15.0",
     "mixpanel-browser": "^2.65.0",
     "near-api-js": "^5.1.1",
-    "next": "16.0.10",
+    "next": "16.2.6",
     "next-themes": "^0.3.0",
     "qrcode.react": "^4.0.1",
     "react": "19.2.1",
@@ -94,7 +94,7 @@
     "@commitlint/cli": "^19.3.0",
     "@commitlint/config-conventional": "^19.2.2",
     "@estruyf/github-actions-reporter": "^1.10.0",
-    "@next/bundle-analyzer": "16.0.7",
+    "@next/bundle-analyzer": "16.2.6",
     "@playwright/test": "1.48.2",
     "@rollup/plugin-alias": "^5.1.1",
     "@rollup/plugin-json": "^6.1.0",